Bare Name Tool Rules

The bare tool name with no parentheses = total coverage. No domain filtering, no patterns.

• WebFetch — all fetches, all domains
• Read — all reads, all files
• Edit — all edits, all files
• Bash — all bash commands
• mcp__stripe — all tools on the stripe server

{
  "permissions": {
    "allow": ["Read", "Edit"],
    "ask": ["Bash", "WebFetch", "Agent"],
    "deny": ["WebSearch", "mcp__github", "Write"]
  }
}

Related: Permission Rules, WebFetch Rules, MCP Rules